The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses python3 to execute a local verification script scripts/check_trace.py at two specific workflow stages (after issue generation and before release). This script performs mechanical validation of cross-references, counts, and closure of required fixes within the generated Markdown files. Evidence: Found in SKILL.md (Step 3 and Step 5) and the provided source code for scripts/check_trace.py.
[DATA_EXPOSURE_AND_EXFILTRATION]: The skill implements strict data access boundaries. It explicitly limits write operations to the sdlc/ subdirectory and the skill's own directory. Source code and database access are strictly read-only (mysql:mysql_query is used for schema verification). This prevents accidental or malicious modification of the codebase. Evidence: Noted in 'General Discipline' section of SKILL.md.
[PROMPT_INJECTION]: The skill employs 'Adversarial Review' prompts designed to force the AI into a critical mindset (assuming the author is overconfident). It uses structured templates for its sub-agents to prevent prompt leakage or context overflow, limiting each agent's input to the specific artifact and relevant contract chapters. Evidence: Found in the 'Adversarial Prompt Template' section of SKILL.md.
[INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest untrusted data (technical designs and test cases). It mitigates injection risks by using 4-character field structures for issues, mandatory human-in-the-loop adjudication for every finding, and explicit boundary markers. It also includes an automated check_trace.py script to ensure that references and metadata have not been manipulated to bypass the gate. Evidence: Documented in Step 3, Step 4, and the issue-template.md specification.
[SAFE]: All external references and evaluation files are contained within the local project structure. The skill includes a robust set of automated tests (evals/ folder) to ensure that security-critical behaviors, such as the independence of test case generation from design documents, are maintained.

sdlc-gate